aws-serverless
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill describes patterns for processing data from external sources such as Amazon SQS, DynamoDB Streams, and Amazon S3. Ingesting untrusted data from these sources constitutes a potential indirect prompt injection surface. The documentation addresses this consideration by recommending robust input validation at the handler boundary and the use of scoped IAM execution roles.
- [Public Endpoint Management]: Guidance on AWS Lambda Function URLs includes instructions for configuring public access via AuthType=NONE. The skill explains the underlying permission requirements (lambda:InvokeFunctionUrl and lambda:InvokeFunction) and provides the necessary security context, advising developers to prefer IAM authentication for production environments to ensure least-privilege access control.
- [Command-Line Tooling]: The skill mentions integration with tools like the AWS CLI and AWS MCP server for infrastructure management and operational tasks. These references are consistent with standard developer workflows for configuring, monitoring, and troubleshooting cloud resources.
Audit Metadata